Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: GitHub Enterprise Server 3.10.10, 3.11.8 and 2 more versions Clear all filters
TI-2024-03437 CVE-2024-3684 · GHSA-mvg6-43mv-76rp

Improper Privilege Management was identified in GitHub Enterprise Server that allowed…

Priority LOW 37

A server side request forgery vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin access to the appliance when configuring the Art…

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.01095 Published 2024-04-19 Fixed in 3.9.13, 3.10.10 +2 CWE-88
TI-2024-03401 CVE-2024-3646 · GHSA-4325-9qm2-3cg2

Improper input validation in GitHub Enterprise Server

Priority MEDIUM 40

A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the instance when configuring the chat integ…

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.01742 Published 2024-04-19 Fixed in 3.9.13, 3.10.10 +2 CWE-20